last executing test programs: 3.295428915s ago: executing program 2 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.118957896s ago: executing program 2 (id=280): getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x4903) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff3f, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1.793773998s ago: executing program 0 (id=293): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x3, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 1.73610249s ago: executing program 0 (id=294): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 1.475749867s ago: executing program 3 (id=297): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="86", 0x1}], 0x1}}], 0x1, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="07000000400081001fff02000000200001801400040000000000000000000000ffffac1414aa060001000a"], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 1.079582528s ago: executing program 3 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x888, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x9, 0x4, 0x1, 0x8, 0x0, 0x1ff, 0x2, 0x81, 0x1, 0x9, 0x8, 0x2, 0x4, 0x7, 0x3e, 0x10001, 0x7fffffff, 0x1, 0x6, 0x0, 0xef, 0x7, 0x1000, 0x9, 0x7, 0x1778a66f, 0x6, 0xa34, 0x7, 0x3, 0x3, 0xffffffff, 0x1, 0x1b5, 0x3, 0xe5, 0xfffffff5, 0xfc46, 0xffff, 0x7, 0x4, 0x6, 0x9, 0x1, 0x64, 0xfffffffa, 0x7368, 0x2e, 0x0, 0x1, 0x3, 0x4, 0x6, 0x3, 0x3, 0x80000000, 0x6, 0x800, 0x9, 0x6, 0xfffffffd, 0x80000001, 0x40, 0x3, 0x8f, 0x7, 0x1, 0x5, 0x4, 0xc, 0x3, 0x10001, 0x80000000, 0x4007008, 0x200, 0x1, 0x5, 0x1000, 0x0, 0xaaf5, 0x2, 0x0, 0x0, 0x1, 0x9, 0xb, 0xd3, 0x5, 0x9, 0x1, 0x9, 0x2, 0x6, 0x10001, 0x3ff, 0x0, 0xa, 0x101, 0x8, 0x5, 0xb, 0x4, 0x1, 0xb3f4, 0xc8, 0x6a41, 0xde, 0x400, 0x54, 0x0, 0x2, 0xe6c, 0x7c77a153, 0x5, 0x9, 0x2, 0x8001, 0x1ff, 0x0, 0x401, 0x1, 0x8, 0x47, 0x7, 0x1, 0x5, 0x4, 0xc, 0x9, 0xff, 0x6, 0x3ff, 0x6, 0x10, 0x3, 0x2, 0xe0000, 0x1, 0x7, 0xfffffff7, 0xfff, 0x2, 0x5, 0x8, 0x9, 0x5, 0xfffff801, 0x0, 0x9e76, 0x8, 0x8, 0xfff, 0x3034, 0xe, 0x200, 0x2, 0x1ff, 0x2, 0x9, 0x0, 0x80000001, 0x5, 0x1, 0x8, 0x1, 0x5, 0xfffffb24, 0x4, 0x7ff, 0x6, 0x4, 0x8, 0x8, 0x1400, 0xfbac, 0x8, 0x81, 0x7, 0x3, 0x4, 0x6, 0x0, 0x0, 0x565e975e, 0xbac8, 0x0, 0xffff8001, 0x0, 0x0, 0x248, 0x9, 0x7, 0xfffffffc, 0x400, 0x80, 0x8, 0x14f8, 0x10, 0x8, 0x9, 0x0, 0x101, 0x0, 0x101, 0x40, 0x101, 0x294, 0x6, 0xfff, 0x3, 0x5c0a, 0x9, 0x7fffffff, 0xfffffff7, 0x9, 0xa5, 0x8, 0x7, 0x5f, 0x4, 0x825, 0xf592, 0x2, 0x8, 0x800, 0x1, 0x4, 0x3, 0x5, 0x2, 0x1, 0x5, 0xffffffff, 0x9, 0x7f, 0xa, 0x9e, 0x7, 0xef1, 0x800, 0x6, 0x4, 0x10000, 0x400, 0x9, 0x8, 0x38f, 0x5b7f0f1c, 0x7, 0x80, 0x2, 0xffffffff, 0x7273, 0x5, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x1c, 0x1ff, 0x800, 0x2, 0xa4000000, 0xbcb, 0x422, 0x4, 0x1, 0x400, 0xe326, 0x0, 0x6, 0x8, 0x1, 0x6, 0x200, 0x3, 0x2, 0x7, 0xe89b, 0x7c0, 0x6, 0x9, 0x3, 0xc0, 0x3ff, 0x1, 0x9, 0x9, 0x7, 0x3, 0xfffffffc, 0x8, 0x3ff, 0x3, 0x6, 0x2, 0x3, 0x5, 0x0, 0x50000, 0x80, 0x9, 0x1, 0x5, 0xe60, 0x6, 0x4310, 0x5, 0x55, 0x8, 0xb, 0x0, 0x3ff, 0xcdc, 0x1, 0x1, 0xd933, 0x6, 0x0, 0xb, 0x4, 0xb, 0x4000000, 0x6, 0x3, 0x3, 0x401, 0x2, 0x6, 0xb85, 0x5, 0x5, 0x9, 0xfffffffc, 0x1, 0x1, 0x75, 0x6, 0xffffffff, 0x0, 0x3, 0x6, 0x1f, 0x3, 0x0, 0x0, 0x2, 0x9, 0x383e, 0x18, 0x3, 0x1, 0xbdb3, 0x0, 0x8001, 0x7fffffff, 0x2c3e426c, 0x3, 0x0, 0x1, 0x10, 0x0, 0x0, 0x3, 0x9, 0x7e, 0x81, 0x8, 0x0, 0xe5, 0x6e, 0xd0625800, 0x100, 0x1, 0x1, 0x80000000, 0x919, 0x3, 0xa, 0xb18, 0x60b3fb30, 0xbd, 0x5, 0xb9de, 0x9, 0x0, 0x4, 0x923, 0x800, 0x80, 0xf, 0x4, 0x3, 0x5, 0x80, 0x4, 0x4, 0x0, 0x10, 0x2, 0x65e2d6b5, 0xfffffff8, 0x200, 0xfffffffa, 0x7, 0x9, 0xbb97, 0x0, 0x7fffffff, 0x7, 0xffffffff, 0x8, 0x6, 0x3d3e, 0x19c3, 0x0, 0x5, 0xfffffffd, 0x400, 0xa, 0x80000000, 0x2, 0x33, 0xb, 0x5fd4, 0x8000, 0x0, 0xc, 0xd, 0x10000, 0x0, 0xff, 0x51c, 0x18, 0x6, 0xfffffff5, 0x4, 0x7c53, 0xfb, 0x3, 0x4, 0x2, 0x7, 0x3, 0xfffffffd, 0x31, 0xffff, 0x4, 0x87d, 0x5, 0x65d, 0x3, 0x3, 0x14, 0x8, 0x81, 0x8a22, 0x9, 0x2, 0x800, 0xca5, 0x7, 0x3, 0x6, 0xe45, 0x9, 0x599, 0x3, 0x1ff, 0x200, 0x5, 0x8, 0x4f77, 0x6, 0xf6, 0x7, 0x9, 0x4, 0x9, 0xfffffffa, 0x8000, 0xff, 0x9, 0xf, 0x7fffffff, 0x1000, 0x7, 0x80000000, 0x4, 0xfffffffa, 0x460, 0xee, 0x800, 0x8, 0x7ff, 0xd66, 0xc4, 0x5, 0xf, 0x81, 0x3, 0x22, 0xfffffff7, 0x7, 0x5, 0x9, 0x3, 0x0, 0x69, 0x800, 0x13bc013c, 0x1, 0x80]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xfffffffffffffffe, 0x0, 0x110, 0x1, {0x1, 0x2, 0x3, 0x1, 0x101, 0x1}, {0xb, 0x0, 0x3, 0xf, 0x800, 0xdb}, 0x2, 0x1, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.073142636s ago: executing program 3 (id=301): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.070216078s ago: executing program 2 (id=303): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x8, 0x3, 0x19}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 949.089709ms ago: executing program 2 (id=306): ioperm(0x0, 0x3, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xcaR4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1, 0x0, 0x0) 870.112768ms ago: executing program 0 (id=308): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x2, 0xc83, 0x0, 0xfefd}, 'syz0\x00', 0xd}) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) 793.301589ms ago: executing program 0 (id=309): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/156, 0x9c}, 0x3}], 0x1, 0x3072, 0x0) 730.37698ms ago: executing program 0 (id=310): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 680.632465ms ago: executing program 0 (id=313): getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x4903) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff3f, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 499.92238ms ago: executing program 1 (id=316): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003600)=@newchain={0x1064, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff2}, {0x3, 0xffff}, {0xffe0, 0x1}}, [@f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xa9, 0x6, 0x3}, {0xe, 0x0, 0x1}, 0x24f3c4b7d3c9328b, 0x27, 0x3}}, @TCA_RSVP_DST={0x8, 0x2, @empty}]}}, @f_rsvp6={{0xa}, {0xffc, 0x2, [@TCA_RSVP_ACT={0x208, 0x6, [@m_mirred={0xd0, 0x20, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x2036, 0x4, 0x7, 0x7fffffff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x6, 0x496, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc21, 0x9, 0x1, 0x0, 0x7ff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe1, 0x2, 0x6, 0x3, 0xfff}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0xa0ea, 0x10000000, 0x88, 0x20000000}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x134, 0xf, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0xdd, 0x6, "1568ba962b49f86a998d0f5bff0ed6d722c6e40b39cd5f7f49c02db69dafdba07d7692a51bad51d9119d239e41a1266cff1c6855f1343162fc57e4ecfaab2a6d03b39fce0de6f6b2719d756bf3e6edfa87ac37b8bbb575a601c99766422fe0f387803480da9aac0a98c66848aa694e11d1f3596b40bc80e942cc38c0f13224138af8ccb8c356622e5ccc5cf089d5af068d53297af401c5a5088c89f6947d02a4426c79e3c4150bf8728ba9eb03436e8fe09d4760b49b51349327d79b5a04bbf376d128876875aa266ca4c5bab9f926f002988918440e95359a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_RSVP_POLICE={0x498, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb2f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xfffffffffffffffc, 0x80000001, 0xb, 0xd, {0x6, 0x0, 0x2eb5, 0x4, 0xfd, 0x5802}, {0x3, 0x0, 0xc, 0xbe40, 0x6}, 0xff, 0x40, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x7b, 0x0, 0x6, 0x100, 0x8, 0x1e5, 0x5, 0xbef3, 0x5, 0x5, 0xfffffff9, 0x2, 0x8, 0xa3, 0x2, 0x7, 0x2, 0x400, 0x5, 0x3, 0x0, 0x3a9, 0x10000, 0x3, 0x4, 0xfffffffa, 0x881, 0xd7, 0x2, 0x7, 0x7, 0x2066, 0xd046, 0x8, 0x1ff, 0x4, 0x4, 0x80000000, 0x38d, 0x401, 0x56a00000, 0x3, 0x4, 0x0, 0x5, 0x4, 0x80, 0x2, 0x80000000, 0x1, 0x10000, 0x800, 0x7, 0x0, 0x1, 0x7, 0xac1, 0x7, 0x1, 0x7, 0x8, 0x7, 0x2, 0x2, 0x0, 0x101, 0xffff, 0x4, 0x2d, 0x2, 0x8, 0xf, 0xc01b, 0x80000000, 0x1, 0x7fffffff, 0x0, 0x2, 0x3, 0x1ff, 0x5, 0x5, 0x10, 0x1, 0x1, 0x775ba6bc, 0x101, 0x4, 0x4, 0x5, 0x5, 0x10000, 0x2, 0x4, 0x3, 0x8, 0x9, 0x9, 0x0, 0x6, 0x7, 0x8, 0xffff7fff, 0xe90, 0x6e, 0x81, 0xc, 0x2, 0x5, 0x163f, 0xf7, 0xba07, 0x8, 0x10, 0x1, 0x5, 0x1, 0x10001, 0x5, 0x6, 0x4, 0x5, 0xfffffff7, 0xa9c, 0x6, 0x80b6, 0x10001, 0x1, 0xffff, 0x3, 0xfffffffc, 0xfffffffe, 0x9, 0x7, 0x7, 0x7, 0x6, 0x3ff, 0x7fff, 0x8, 0xffffffff, 0x6, 0x8, 0x3df1, 0xfd, 0xa93, 0x9, 0xfff, 0xff, 0x7ff, 0x1000, 0xfa2, 0x94, 0x2, 0x7945, 0x8, 0xffffff5f, 0x101, 0x6, 0x7, 0x81, 0x5, 0x8, 0xfff, 0x8ea2, 0x0, 0x869, 0x2b64, 0x5f, 0x7, 0x3, 0x0, 0x1ff, 0xc1f8, 0x6, 0x7, 0x7, 0xa, 0x5, 0xfffffff7, 0x6, 0x80, 0x8, 0x2, 0x8001, 0x8, 0x2, 0x1, 0x6, 0x7, 0x200, 0x3, 0x3c67, 0x5, 0x2, 0x6, 0x80000001, 0x7, 0x5, 0x7, 0x5577, 0x8, 0x0, 0x6, 0x7, 0x7ff, 0x1, 0x4, 0x9, 0x40000000, 0xffffffff, 0x3, 0x49, 0x199a, 0x9, 0x80000001, 0x5, 0x800, 0xfffffffd, 0x4, 0x2, 0x8, 0x3ff, 0xa73, 0xffffffff, 0xfb, 0x3ff, 0xffffffff, 0xfffffffe, 0x7ff, 0x10001, 0x6, 0x6, 0x8, 0x2, 0xf, 0x0, 0x80000001, 0x1, 0x9, 0x0, 0xc15, 0x85, 0xd, 0x9, 0xe507, 0x4, 0xfffff801, 0x0, 0x3, 0x800, 0x6, 0x1ff, 0xd, 0x7, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x7000, 0x860}, {0x3, 0x0, 0x6}, 0x89, 0xc, 0x60}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xfff3}}, @TCA_RSVP_POLICE={0x58, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x7, 0x81, 0x4, {0x1, 0x1, 0x1, 0x800, 0x5, 0x4}, {0x4, 0x1, 0xffff, 0x800, 0xf09f, 0x3}, 0x9, 0x7, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb98f}]}, @TCA_RSVP_ACT={0x8d8, 0x6, [@m_skbedit={0x9c, 0x3, 0x0, 0x0, {{0xc}, {0x4}, {0x6d, 0x6, "465add5be1404215a7a9867cf0ffdb13615be1897951c33b6de2247634cc81965e7a0fd758eca3ed6cdd1657f4fa1615dab877111edf3bc1140b083c368cd20182b8929d51225c7fde02585c25e24fd166e7d7e274f0574acbee0dfab367d072f931f8129e035246a0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x838, 0x8, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x3, 0x9, 0x800, 0x81, 0xc, 0x0, 0x5e7b, 0x8, 0x7, 0x0, 0x7, 0x1, 0x7, 0x8001, 0x1, 0x3ff, 0x1, 0x2, 0xf, 0x0, 0x80000000, 0xfffffffd, 0xffffffff, 0x8, 0xfffffffc, 0x8, 0x9, 0x5, 0x7, 0x10001, 0xfffffffc, 0x401, 0x8, 0x708, 0x5b, 0xfffffffd, 0x58, 0x10000, 0x2, 0x8, 0x74, 0x9, 0x9, 0x800, 0x9, 0x1, 0x8, 0x7b09, 0x4, 0x7, 0xd, 0x1000, 0x5, 0x0, 0x1, 0x2, 0x1, 0x81, 0x8001, 0x6aa, 0x0, 0x7, 0x0, 0xf6f8, 0x2, 0x8, 0x401, 0xc, 0x2, 0xfffffff7, 0x2e03, 0xb53e, 0x0, 0x5, 0xffffffff, 0x8, 0x10001, 0x9, 0x100, 0xce5, 0x7fff, 0x0, 0x4fe0, 0x2800000, 0x0, 0x6, 0x0, 0xfffffffa, 0x6, 0x76b5343c, 0x4, 0xfff, 0xf, 0x1, 0x3, 0x7, 0x6, 0x54, 0x0, 0xaae9, 0x5, 0x10000, 0xffffffff, 0xebe5, 0x4, 0x81, 0x4, 0xe, 0x3, 0x9, 0x63, 0x6, 0x729, 0x2, 0x7, 0x9, 0x7, 0x7, 0x5, 0x6, 0x1000, 0x4, 0xffffffff, 0x10, 0xe, 0x6, 0x100, 0x1000, 0x381300, 0x5, 0x2, 0x9, 0xd, 0x4, 0xb, 0xfffffff0, 0x2, 0x1, 0x3ff, 0xd, 0x80000000, 0x7d3, 0x9, 0x2, 0x3ff, 0x9, 0x0, 0xfffffffa, 0x800, 0x2, 0x793, 0x5, 0x3, 0x7, 0x0, 0x2, 0x8, 0xb, 0x0, 0x7ff, 0x5, 0x4, 0x65f93f1f, 0x1, 0x8628, 0xff, 0x2ae9ae44, 0x6, 0x3, 0x1, 0x4, 0x1, 0x100, 0x251, 0x80000000, 0x7e3, 0x1, 0x6, 0x6, 0xfffffffd, 0x9, 0x7, 0xcf86, 0x8a, 0x4, 0x7, 0x6, 0x6, 0xff, 0x0, 0x7, 0x3, 0x8001, 0x101, 0x1, 0x4, 0x8, 0x2, 0x100, 0x7, 0x3000000, 0x9, 0x2, 0x11, 0x0, 0xfffffff8, 0x9, 0x3, 0xbfdb, 0xfffffff9, 0xf, 0x7, 0xfffffffa, 0x6, 0x80000000, 0x7, 0x6, 0x0, 0x40, 0x4, 0x7ff, 0xa, 0xfff, 0xfe9d, 0xff, 0x5, 0x40, 0xa3, 0x6a81fb0e, 0xcc, 0x9, 0x9, 0x40, 0xff, 0x4, 0x2, 0xff, 0xfffffff7, 0x0, 0x8bb, 0x2, 0x2, 0x5, 0x3ff, 0x2, 0xffffb971, 0x81, 0xaec, 0xd30, 0x0, 0x8000, 0x6, 0x1, 0x7]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0x6, 0x80000000, 0x64d, 0x49, 0xe20d, 0x8, 0x6, 0x9, 0x589a7c39, 0x40, 0x2, 0xfffffffc, 0x525c, 0x6, 0x6, 0x14, 0x351, 0x5144, 0x4, 0x3, 0x5, 0xff, 0x9, 0x7, 0x3, 0x2, 0xd, 0xd, 0x28, 0x9, 0x5, 0x2, 0x4, 0x4, 0x7, 0x8000, 0x8, 0x2, 0xfffffca4, 0x2, 0xffffffff, 0x9, 0x2, 0x92e, 0x9, 0x9ad8, 0x5aededc0, 0x2, 0xc, 0x1, 0x5, 0x9, 0x7, 0x7a, 0x2, 0x2, 0xc, 0x4b4, 0x5, 0x3, 0x4092, 0x6, 0xfff, 0xd, 0x3, 0x5, 0x101, 0x9, 0x9, 0x8001, 0x7, 0x6, 0x5, 0xd, 0xdb1, 0x4892, 0x9f54, 0x7, 0x2b4, 0x81, 0x7, 0x0, 0xe, 0x8e, 0x1, 0x7, 0x7ff, 0x9c12, 0x869, 0x8aa, 0x8, 0x4, 0x5, 0x8, 0x1, 0x1ff, 0xffffffff, 0x8000, 0xc, 0x933e, 0x7, 0x81, 0x0, 0x100, 0x0, 0xffff, 0x7, 0x7ff0, 0x6, 0xfffff9ac, 0x18000, 0x1, 0x7c, 0x9, 0x5, 0xfffffff8, 0x4, 0x4, 0x7, 0x0, 0xfffffff7, 0x5, 0x6, 0x1, 0x5, 0x1, 0x4394, 0x1ff, 0x9ba, 0x2, 0x8000, 0xffffffff, 0xf3, 0x8d, 0x9, 0xef, 0x0, 0x4, 0x61, 0xfffffffe, 0xd8c0, 0x1b04, 0x5, 0x3, 0x7, 0x0, 0xf83, 0x2, 0x9, 0x3, 0x7, 0x8, 0x2, 0x2, 0xffff, 0x984, 0x8, 0x6, 0x5, 0x4, 0x4, 0x920a, 0x3, 0x7f, 0x5, 0x10, 0x2, 0x2, 0x80000000, 0x1, 0x5, 0x63, 0xc, 0x1, 0xffffffbd, 0x2, 0x2e0b, 0x0, 0x0, 0xcce0, 0x0, 0x1ff, 0x1ff, 0x8, 0x2, 0x80000001, 0x40, 0x4, 0x2, 0x7, 0x80000001, 0x8052, 0x2, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1, 0x3, 0x9, 0x10000, 0x3ff, 0x8, 0x85, 0x0, 0x5, 0x9, 0x1, 0x80000, 0x15, 0x80000001, 0x5, 0x3f7eb747, 0xe12, 0x8, 0xfffffff6, 0x5, 0x4, 0x5, 0x200000, 0x9, 0x8, 0x9, 0x5, 0x6, 0x5, 0x10001, 0x1, 0x0, 0x5, 0x0, 0x80000000, 0x10000, 0x8, 0x4, 0x5, 0x8, 0x1f6, 0x400, 0x9, 0x7f, 0x2, 0xfffffff8, 0x9, 0xbae, 0x1, 0x6d8, 0x1, 0xfff, 0x6, 0x100, 0x200, 0x2]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}]}, 0x1064}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/91, 0x5b}, {&(0x7f0000000880)=""/183, 0xb7}], 0x3}}], 0x1, 0x141, 0x0) 420.229647ms ago: executing program 1 (id=317): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '^{'}, {0x20, '&/^'}], 0xa, "8450ffda46dfa26441744a07a93e274b889f817840ebeccb40bc645da2f3a4490d77feba14090961f60deb39ad6657eaf10479c03d24ff0f91"}, 0x4b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r2, 0x0, 0x30, 0xe1515f8735398eb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)=[0xff], 0x0, 0x0, 0x1, 0x1}}, 0x40) 290.261536ms ago: executing program 1 (id=318): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000843000/0x1000)=nil, 0x1000, 0x2000007, 0x401d071, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000080), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000040), 0xc00000, 0x4) close(r1) 190.720771ms ago: executing program 3 (id=319): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}, {&(0x7f0000000600)=ANY=[@ANYBLOB="c40000001900000228bd7000fedbdf25633b10874b89866f0c8f0c8073c6e89ec31b6176c6d99a290e4c68f27730c537555efb675e8de917f667fd758f58de9d45c7905c7fce7cc18acd534f039a27835edb72f71f700bd34e5e0146b19f23d7a0a4e808e932ba3231f4"], 0xc4}, {&(0x7f00000003c0)=ANY=[@ANYBLOB="f00000003900000427bd7000fcdbdf25b6758a293fd77079e5515337840ec80b4eaf8b"], 0xf0}, {&(0x7f000000a100)=ANY=[], 0x2144}], 0x4}, 0xc0) 190.493822ms ago: executing program 3 (id=320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/157, 0x9d}, {0x0}, {&(0x7f0000000400)=""/144, 0x90}, {&(0x7f00000004c0)=""/157, 0x9d}, {&(0x7f0000000580)=""/225, 0xe1}, {&(0x7f0000000680)=""/95, 0x5f}], 0x6}, 0x10002) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/227, 0xe3}, {0x0}], 0x2, &(0x7f00000015c0)=""/207, 0xcf}, 0x10000) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x716, 0x0, 0x0) 126.892988ms ago: executing program 1 (id=321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000900)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8, 0xffff, 0x0, 0x1000}}}}}}, 0x0) 126.672955ms ago: executing program 1 (id=322): bpf$OBJ_GET_MAP(0x6, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 126.516297ms ago: executing program 2 (id=323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 58.970748ms ago: executing program 1 (id=324): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 237.642µs ago: executing program 3 (id=325): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x18, &(0x7f00000007c0)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="000302"], 0x0, 0x0, 0x0}, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000140)={0x1, "c5"}) 0s ago: executing program 2 (id=326): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x2, 0x18, 0x5, 0x6, 0xb, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e20, @private=0xa010100}}, @sadb_address={0x3, 0x7, 0x4fc1348ded3f0f3a, 0x80, 0x0, @in={0x2, 0x4e22, @private=0xa010101}}, @sadb_x_nat_t_type={0x1, 0x14, 0xf9}]}, 0x58}}, 0x80) recvmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12040, 0x0) 0s ago: executing program 1 (id=327): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a80)=ANY=[], 0x77c}}, 0x8010) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000815) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:27352' (ED25519) to the list of known hosts. [ 42.586479][ T5897] cgroup: Unknown subsys name 'net' [ 42.747787][ T5897] cgroup: Unknown subsys name 'cpuset' [ 42.754741][ T5897] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.745532][ T5897] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.576114][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.579191][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.582589][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.583026][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.583419][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.584227][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.584561][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.585599][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.585757][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.586010][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.588001][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.590699][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.591242][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.592480][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.592503][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.593060][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.593410][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.620583][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.624232][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.629963][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.827439][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 47.872542][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 47.912859][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 47.991772][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.994246][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.996741][ T5934] bridge_slave_0: entered allmulticast mode [ 47.999379][ T5934] bridge_slave_0: entered promiscuous mode [ 48.065212][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.067469][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.069779][ T5934] bridge_slave_1: entered allmulticast mode [ 48.072423][ T5934] bridge_slave_1: entered promiscuous mode [ 48.082536][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.084866][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.087099][ T5936] bridge_slave_0: entered allmulticast mode [ 48.089695][ T5936] bridge_slave_0: entered promiscuous mode [ 48.123667][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 48.151475][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.154739][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.159261][ T5936] bridge_slave_1: entered allmulticast mode [ 48.163517][ T5936] bridge_slave_1: entered promiscuous mode [ 48.170043][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.211943][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.250076][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.253364][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.256443][ T5933] bridge_slave_0: entered allmulticast mode [ 48.260314][ T5933] bridge_slave_0: entered promiscuous mode [ 48.323504][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.326641][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.329746][ T5933] bridge_slave_1: entered allmulticast mode [ 48.333520][ T5933] bridge_slave_1: entered promiscuous mode [ 48.337643][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.345029][ T5934] team0: Port device team_slave_0 added [ 48.369948][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.398001][ T5934] team0: Port device team_slave_1 added [ 48.437857][ T5936] team0: Port device team_slave_0 added [ 48.464070][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.467946][ T5936] team0: Port device team_slave_1 added [ 48.486497][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.488715][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.496666][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.541379][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.557733][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.559900][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.568143][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.572605][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.575241][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.577678][ T5943] bridge_slave_0: entered allmulticast mode [ 48.580320][ T5943] bridge_slave_0: entered promiscuous mode [ 48.623754][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.626506][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.629179][ T5943] bridge_slave_1: entered allmulticast mode [ 48.631755][ T5943] bridge_slave_1: entered promiscuous mode [ 48.649344][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.652062][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.660296][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.665170][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.667333][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.675575][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.709561][ T5933] team0: Port device team_slave_0 added [ 48.751557][ T5934] hsr_slave_0: entered promiscuous mode [ 48.754049][ T5934] hsr_slave_1: entered promiscuous mode [ 48.782550][ T5933] team0: Port device team_slave_1 added [ 48.814000][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.830667][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.832964][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.841926][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.872551][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.904678][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.906870][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.914913][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.922584][ T5936] hsr_slave_0: entered promiscuous mode [ 48.925883][ T5936] hsr_slave_1: entered promiscuous mode [ 48.929136][ T5936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.932386][ T5936] Cannot create hsr debugfs directory [ 48.982649][ T5943] team0: Port device team_slave_0 added [ 49.003756][ T5943] team0: Port device team_slave_1 added [ 49.062584][ T5933] hsr_slave_0: entered promiscuous mode [ 49.066292][ T5933] hsr_slave_1: entered promiscuous mode [ 49.068380][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.070758][ T5933] Cannot create hsr debugfs directory [ 49.146606][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.149083][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.158418][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.185215][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.187469][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.195773][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.303054][ T5943] hsr_slave_0: entered promiscuous mode [ 49.306203][ T5943] hsr_slave_1: entered promiscuous mode [ 49.309126][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.312178][ T5943] Cannot create hsr debugfs directory [ 49.440976][ T5934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.449377][ T5934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.457863][ T5934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.490854][ T5934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.530977][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.536138][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.542232][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.547926][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.588248][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.592255][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.596816][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.601073][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.633311][ T5945] Bluetooth: hci0: command tx timeout [ 49.635312][ T5945] Bluetooth: hci2: command tx timeout [ 49.637453][ T5945] Bluetooth: hci1: command tx timeout [ 49.641459][ T5933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.657657][ T5933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.668481][ T5933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.693551][ T5933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.712674][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.712923][ T5945] Bluetooth: hci3: command tx timeout [ 49.743664][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.756517][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.777219][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.779450][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.796924][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.799165][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.806505][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.816429][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.830068][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.832345][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.836829][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.839083][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.852204][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.874154][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.877158][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.901149][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.903469][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.940831][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.960411][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.976885][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.979906][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.990448][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.992689][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.999687][ T5943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.068112][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.087732][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.114212][ T5936] veth0_vlan: entered promiscuous mode [ 50.123954][ T5936] veth1_vlan: entered promiscuous mode [ 50.128724][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.159399][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.168024][ T5934] veth0_vlan: entered promiscuous mode [ 50.180115][ T5934] veth1_vlan: entered promiscuous mode [ 50.204007][ T5936] veth0_macvtap: entered promiscuous mode [ 50.206682][ T5943] veth0_vlan: entered promiscuous mode [ 50.215990][ T5936] veth1_macvtap: entered promiscuous mode [ 50.221810][ T5943] veth1_vlan: entered promiscuous mode [ 50.244053][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.248993][ T5934] veth0_macvtap: entered promiscuous mode [ 50.257700][ T5934] veth1_macvtap: entered promiscuous mode [ 50.265963][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.269982][ T5933] veth0_vlan: entered promiscuous mode [ 50.277248][ T5936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.280001][ T5936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.283263][ T5936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.286203][ T5936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.297191][ T5933] veth1_vlan: entered promiscuous mode [ 50.303045][ T5943] veth0_macvtap: entered promiscuous mode [ 50.311887][ T5943] veth1_macvtap: entered promiscuous mode [ 50.321333][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.328781][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.342056][ T5934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.345857][ T5934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.349445][ T5934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.353252][ T5934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.393155][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.397514][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.402195][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.403543][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.405167][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.408261][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.410958][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.418048][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.427083][ T5933] veth0_macvtap: entered promiscuous mode [ 50.446996][ T5933] veth1_macvtap: entered promiscuous mode [ 50.463774][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.466258][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.480317][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.484873][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.491426][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.507854][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.515682][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.522306][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.523884][ T5936] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.526258][ T5933] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.533962][ T5933] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.536895][ T5933] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.539803][ T5933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.547688][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.550294][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.572136][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.575497][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.636965][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.640197][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.667735][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.670758][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.813028][ T6015] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4'. [ 50.952944][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 51.044741][ T5945] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 51.048675][ T5945] CPU: 1 UID: 0 PID: 5945 Comm: kworker/u33:4 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(full) [ 51.048701][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.048714][ T5945] Workqueue: hci3 hci_rx_work [ 51.048736][ T5945] Call Trace: [ 51.048742][ T5945] [ 51.048749][ T5945] dump_stack_lvl+0x16c/0x1f0 [ 51.048776][ T5945] sysfs_warn_dup+0x7f/0xa0 [ 51.048802][ T5945] sysfs_create_dir_ns+0x24b/0x2b0 [ 51.048818][ T5945] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 51.048833][ T5945] ? find_held_lock+0x2b/0x80 [ 51.048863][ T5945] ? do_raw_spin_unlock+0x172/0x230 [ 51.048892][ T5945] kobject_add_internal+0x2c4/0x9b0 [ 51.048921][ T5945] kobject_add+0x16e/0x240 [ 51.048931][ T5945] ? __pfx_kobject_add+0x10/0x10 [ 51.048940][ T5945] ? do_raw_spin_unlock+0x172/0x230 [ 51.048954][ T5945] ? kobject_put+0xab/0x5a0 [ 51.048972][ T5945] device_add+0x288/0x1a70 [ 51.048985][ T5945] ? __pfx_dev_set_name+0x10/0x10 [ 51.048998][ T5945] ? __pfx_device_add+0x10/0x10 [ 51.049009][ T5945] ? mgmt_send_event_skb+0x2fb/0x460 [ 51.049035][ T5945] hci_conn_add_sysfs+0x17e/0x230 [ 51.049053][ T5945] le_conn_complete_evt+0x1075/0x1d70 [ 51.049085][ T5945] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 51.049111][ T5945] ? hci_event_packet+0x43c/0x1190 [ 51.049141][ T5945] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 51.049163][ T5945] ? skb_pull_data+0x166/0x210 [ 51.049176][ T5945] hci_le_meta_evt+0x2f3/0x5e0 [ 51.049185][ T5945] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 51.049202][ T5945] hci_event_packet+0x66c/0x1190 [ 51.049217][ T5945] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 51.049228][ T5945] ? __pfx_hci_event_packet+0x10/0x10 [ 51.049244][ T5945] ? kcov_remote_start+0x3c9/0x6d0 [ 51.049256][ T5945] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.049273][ T5945] hci_rx_work+0x2c5/0x16b0 [ 51.049283][ T5945] ? rcu_is_watching+0x12/0xc0 [ 51.049301][ T5945] process_one_work+0x9cf/0x1b70 [ 51.049319][ T5945] ? __pfx_process_one_work+0x10/0x10 [ 51.049336][ T5945] ? assign_work+0x1a0/0x250 [ 51.049349][ T5945] worker_thread+0x6c8/0xf10 [ 51.049368][ T5945] ? __pfx_worker_thread+0x10/0x10 [ 51.049381][ T5945] kthread+0x3c2/0x780 [ 51.049393][ T5945] ? __pfx_kthread+0x10/0x10 [ 51.049404][ T5945] ? __pfx_kthread+0x10/0x10 [ 51.049415][ T5945] ? __pfx_kthread+0x10/0x10 [ 51.049426][ T5945] ? __pfx_kthread+0x10/0x10 [ 51.049437][ T5945] ? rcu_is_watching+0x12/0xc0 [ 51.049451][ T5945] ? __pfx_kthread+0x10/0x10 [ 51.049464][ T5945] ret_from_fork+0x48/0x80 [ 51.049474][ T5945] ? __pfx_kthread+0x10/0x10 [ 51.049486][ T5945] ret_from_fork_asm+0x1a/0x30 [ 51.049502][ T5945] [ 51.049518][ T5945] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 51.139581][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.143757][ T5945] Bluetooth: hci3: failed to register connection device [ 51.149623][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.158516][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 51.161850][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.382135][ T9] usb 7-1: usb_control_msg returned -32 [ 51.389326][ T9] usbtmc 7-1:16.0: can't read capabilities [ 51.463465][ T6049] af_packet: tpacket_rcv: packet too big, clamped from 32769 to 3952. macoff=96 [ 51.713234][ T5945] Bluetooth: hci1: command tx timeout [ 51.715110][ T5949] Bluetooth: hci2: command tx timeout [ 51.715547][ T5945] Bluetooth: hci0: command tx timeout [ 51.783605][ T5945] Bluetooth: hci3: command tx timeout [ 51.941346][ T54] usb 7-1: USB disconnect, device number 2 [ 52.303714][ T6100] trusted_key: syz.3.44 sent an empty control message without MSG_MORE. [ 52.691922][ T6121] netfs: Couldn't get user pages (rc=-14) [ 53.554209][ T6156] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 53.783065][ T5945] Bluetooth: hci0: command tx timeout [ 53.792829][ T5945] Bluetooth: hci2: command tx timeout [ 53.794048][ T5949] Bluetooth: hci1: command tx timeout [ 53.863383][ T5949] Bluetooth: hci3: command tx timeout [ 54.282860][ T6186] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 54.294197][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.378186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 54.445263][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.448688][ T9] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 54.451473][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.458473][ T9] usb 8-1: config 0 descriptor?? [ 54.603502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 54.680044][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 54.682052][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 54.688997][ T9] usb 8-1: USB disconnect, device number 2 [ 54.903167][ T5996] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.025600][ T6189] syz.0.78 (6189): drop_caches: 1 [ 55.045715][ T6189] syz.0.78 (6189): drop_caches: 1 [ 55.053375][ T5996] usb 6-1: Using ep0 maxpacket: 16 [ 55.069267][ T5996] usb 6-1: unable to get BOS descriptor or descriptor too short [ 55.075986][ T5996] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 55.079126][ T5996] usb 6-1: can't read configurations, error -71 [ 55.112886][ T2297] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 55.272890][ T2297] usb 8-1: Using ep0 maxpacket: 32 [ 55.277277][ T2297] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.281981][ T2297] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 55.286979][ T2297] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.287449][ T6215] block nbd0: NBD_DISCONNECT [ 55.293445][ T2297] usb 8-1: config 0 descriptor?? [ 55.293640][ T6215] block nbd0: Disconnected due to user request. [ 55.298632][ T6215] block nbd0: shutting down sockets [ 55.298715][ T2297] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 55.306011][ T2297] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 55.505526][ T6221] netlink: 240 bytes leftover after parsing attributes in process `syz.0.92'. [ 55.741443][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 55.811165][ T2297] usb 8-1: USB disconnect, device number 3 [ 55.816626][ T2297] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 55.866986][ T5945] Bluetooth: hci2: command tx timeout [ 55.869362][ T5945] Bluetooth: hci0: command tx timeout [ 55.871960][ T5949] Bluetooth: hci1: command tx timeout [ 55.956193][ T5949] Bluetooth: hci3: command tx timeout [ 56.136644][ T6256] netlink: 'syz.1.106': attribute type 1 has an invalid length. [ 56.153463][ T6256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.177780][ T6256] bond1: (slave gretap1): making interface the new active one [ 56.181649][ T6256] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 56.502134][ T10] libceph: connect (1)[c::]:6789 error -101 [ 56.504589][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 56.655784][ T6289] ceph: No mds server is up or the cluster is laggy [ 56.704649][ T6325] tipc: Failed to remove unknown binding: 66,1,1/0:2286665288/2286665290 [ 56.707533][ T6325] tipc: Failed to remove unknown binding: 66,1,1/0:2286665288/2286665290 [ 56.785349][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 56.788606][ T6340] netlink: 32 bytes leftover after parsing attributes in process `syz.3.125'. [ 57.020308][ T6360] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.025733][ T6360] netlink: 'syz.1.131': attribute type 12 has an invalid length. [ 57.028200][ T6360] netlink: 'syz.1.131': attribute type 29 has an invalid length. [ 57.030592][ T6360] netlink: 148 bytes leftover after parsing attributes in process `syz.1.131'. [ 57.033745][ T6360] netlink: 'syz.1.131': attribute type 1 has an invalid length. [ 57.036211][ T6360] netlink: 'syz.1.131': attribute type 2 has an invalid length. [ 57.039255][ T6360] netlink: 39 bytes leftover after parsing attributes in process `syz.1.131'. [ 57.042189][ T6360] Zero length message leads to an empty skb [ 57.842863][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 58.014403][ T10] usb 6-1: config 0 has no interfaces? [ 58.016211][ T10] usb 6-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice= d.7b [ 58.019117][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.027059][ T10] usb 6-1: config 0 descriptor?? [ 58.246266][ T10] usb 6-1: USB disconnect, device number 4 [ 58.293670][ T6436] syz.0.163 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 58.679948][ T10] libceph: connect (1)[c::]:6789 error -101 [ 58.681926][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 58.943908][ T10] libceph: connect (1)[c::]:6789 error -101 [ 58.946944][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 59.124949][ T6492] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.463753][ T10] libceph: connect (1)[c::]:6789 error -101 [ 59.465747][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 59.487615][ T6520] random: crng reseeded on system resumption [ 59.508324][ T6454] ceph: No mds server is up or the cluster is laggy [ 59.686397][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 59.727527][ T6541] Bluetooth: MGMT ver 1.23 [ 59.729161][ T6541] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 60.292394][ T6574] netlink: 'syz.0.219': attribute type 1 has an invalid length. [ 60.295091][ T6574] netlink: 'syz.0.219': attribute type 2 has an invalid length. [ 60.361189][ T40] audit: type=1800 audit(1748308192.812:2): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.223" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 60.539087][ T6589] input: syz1 as /devices/virtual/input/input5 [ 60.620233][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.692575][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.772437][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.827684][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.830628][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.840836][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.844897][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.848104][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.901887][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.959701][ T6607] chnl_net:caif_netlink_parms(): no params data found [ 61.070472][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.072660][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.077563][ T6607] bridge_slave_0: entered allmulticast mode [ 61.080176][ T6607] bridge_slave_0: entered promiscuous mode [ 61.084174][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.086411][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.088569][ T6607] bridge_slave_1: entered allmulticast mode [ 61.091335][ T6607] bridge_slave_1: entered promiscuous mode [ 61.124766][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.129649][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.182985][ T6607] team0: Port device team_slave_0 added [ 61.198210][ T6607] team0: Port device team_slave_1 added [ 61.241392][ T13] bridge_slave_1: left allmulticast mode [ 61.243904][ T13] bridge_slave_1: left promiscuous mode [ 61.246700][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.252086][ T13] bridge_slave_0: left allmulticast mode [ 61.255030][ T13] bridge_slave_0: left promiscuous mode [ 61.256858][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.302839][ T5976] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 61.353123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.473452][ T5976] usb 8-1: Using ep0 maxpacket: 8 [ 61.477278][ T5976] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 61.479872][ T5976] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.480135][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.483044][ T5976] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.489037][ T5976] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.492248][ T5976] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.492531][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.496435][ T5976] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 61.501834][ T5976] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.504130][ T13] bond0 (unregistering): Released all slaves [ 61.533507][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.535721][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.544534][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.557253][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.559657][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.568140][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.615438][ T6607] hsr_slave_0: entered promiscuous mode [ 61.617617][ T6607] hsr_slave_1: entered promiscuous mode [ 61.619620][ T6607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.621960][ T6607] Cannot create hsr debugfs directory [ 61.712002][ T5976] usb 8-1: GET_CAPABILITIES returned 0 [ 61.714752][ T5976] usbtmc 8-1:16.0: can't read capabilities [ 61.863719][ T13] hsr_slave_0: left promiscuous mode [ 61.870834][ T13] hsr_slave_1: left promiscuous mode [ 61.874229][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.877088][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.881920][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.885622][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.912962][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.917474][ T13] veth1_macvtap: left promiscuous mode [ 61.919363][ T13] veth0_macvtap: left promiscuous mode [ 61.921742][ T13] veth1_vlan: left promiscuous mode [ 61.923659][ T13] veth0_vlan: left promiscuous mode [ 62.018756][ T6622] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 62.019314][ T5976] usb 8-1: USB disconnect, device number 4 [ 62.028165][ T6665] usbtmc 8-1:16.0: stb usb_control_msg returned -19 [ 62.064009][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 62.071089][ T10] usb 7-1: config 0 has no interfaces? [ 62.073226][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.076157][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.079985][ T10] usb 7-1: config 0 descriptor?? [ 62.093065][ T40] audit: type=1800 audit(1748308194.542:3): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.250" name="file0" dev="9p" ino=35913804 res=0 errno=0 [ 62.094390][ T6664] netfs: Couldn't get user pages (rc=-14) [ 62.348929][ T5976] usb 7-1: USB disconnect, device number 3 [ 62.444683][ T13] team0 (unregistering): Port device team_slave_1 removed [ 62.497525][ T13] team0 (unregistering): Port device team_slave_0 removed [ 62.902889][ T63] Bluetooth: hci3: command tx timeout [ 63.325242][ T6607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.331142][ T6607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.349845][ T6607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.376099][ T6607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.432791][ T6607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.446971][ T6607] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.452095][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.454627][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.462685][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.464971][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.526640][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 63.611999][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.643445][ T6607] veth0_vlan: entered promiscuous mode [ 63.648147][ T6607] veth1_vlan: entered promiscuous mode [ 63.671932][ T6607] veth0_macvtap: entered promiscuous mode [ 63.678558][ T6607] veth1_macvtap: entered promiscuous mode [ 63.687222][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.693304][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.698488][ T6607] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.701236][ T6607] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.708135][ T6607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.710874][ T6607] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.751255][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.760246][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.771733][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.774504][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.823897][ T6776] syz.0.229: attempt to access beyond end of device [ 63.823897][ T6776] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 63.828350][ T6776] FAT-fs (loop1): unable to read boot sector [ 64.870859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.873719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.876121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.992872][ T5949] Bluetooth: hci3: command tx timeout [ 65.073830][ T5949] Bluetooth: hci1: command 0x0406 tx timeout [ 66.119712][ T6848] input: syz0 as /devices/virtual/input/input6 [ 66.213985][ T6855] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 66.218717][ T6855] overlayfs: overlapping lowerdir path [ 66.393205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.035712][ T6902] BUG: unable to handle page fault for address: ffffed102b20ee68 [ 67.038771][ T6902] #PF: supervisor read access in kernel mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 67.041677][ T6902] #PF: error_code(0x0000) - not-present page [ 67.044209][ T6902] PGD 7ffcd067 P4D 7ffcd067 PUD 3fff7067 PMD 0 [ 67.046187][ T6902] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 67.047842][ T6902] CPU: 3 UID: 0 PID: 6902 Comm: syz.1.327 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(full) [ 67.051244][ T6902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.054531][ T6902] RIP: 0010:__crypto_shash_import+0x153/0x290 [ 67.056377][ T6902] Code: 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 12 01 00 00 48 b9 00 00 00 00 00 fc ff df 8d 56 ff 8b 5b fc 4c 01 f2 48 89 d6 48 c1 ee 03 <0f> b6 0c 0e 48 89 d6 83 e6 07 40 38 f1 7f 08 84 c9 0f 85 ca 00 00 [ 67.062236][ T6902] RSP: 0018:ffffc9000356fc28 EFLAGS: 00010a03 [ 67.064391][ T6902] RAX: 0000000000000001 RBX: 0000000000000000 RCX: dffffc0000000000 [ 67.066802][ T6902] RDX: ffff888159077347 RSI: 1ffff1102b20ee68 RDI: ffffffff8ee71594 [ 67.069215][ T6902] RBP: ffff888059077340 R08: 0000000000000005 R09: 0000000000000000 [ 67.071632][ T6902] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 67.074035][ T6902] R13: 0000000000000010 R14: ffff888059077348 R15: ffff88802865ef80 [ 67.076520][ T6902] FS: 0000000000000000(0000) GS:ffff888097ab1000(0063) knlGS:00000000f5056b40 [ 67.079188][ T6902] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 67.081138][ T6902] CR2: ffffed102b20ee68 CR3: 000000004f037000 CR4: 0000000000352ef0 [ 67.083540][ T6902] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.086042][ T6902] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.088494][ T6902] Call Trace: [ 67.089564][ T6902] [ 67.090510][ T6902] ? rcu_is_watching+0x12/0xc0 [ 67.092163][ T6902] crypto_shash_import+0x88/0x260 [ 67.093852][ T6902] crypto_ahash_import+0xcd/0x2a0 [ 67.095494][ T6902] hash_accept+0x33c/0x3d0 [ 67.096908][ T6902] do_accept+0x33b/0x530 [ 67.098257][ T6902] ? __pfx_do_accept+0x10/0x10 [ 67.099777][ T6902] __sys_accept4+0x100/0x1c0 [ 67.101242][ T6902] ? __pfx___sys_accept4+0x10/0x10 [ 67.102841][ T6902] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 67.104799][ T6902] __ia32_sys_accept4+0x94/0x100 [ 67.106348][ T6902] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 67.108387][ T6902] __do_fast_syscall_32+0x73/0x120 [ 67.110014][ T6902] do_fast_syscall_32+0x32/0x80 [ 67.111533][ T6902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.113695][ T6902] RIP: 0023:0xf7f36579 [ 67.115391][ T6902] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 67.121612][ T6902] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 000000000000016c [ 67.124225][ T6902] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 67.126684][ T6902] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 67.129139][ T6902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.131597][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.134046][ T6902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.136544][ T6902] [ 67.137527][ T6902] Modules linked in: [ 67.138758][ T6902] CR2: ffffed102b20ee68 [ 67.140060][ T6902] ---[ end trace 0000000000000000 ]--- [ 67.141770][ T6902] RIP: 0010:__crypto_shash_import+0x153/0x290 [ 67.143663][ T6902] Code: 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 12 01 00 00 48 b9 00 00 00 00 00 fc ff df 8d 56 ff 8b 5b fc 4c 01 f2 48 89 d6 48 c1 ee 03 <0f> b6 0c 0e 48 89 d6 83 e6 07 40 38 f1 7f 08 84 c9 0f 85 ca 00 00 [ 67.149590][ T6902] RSP: 0018:ffffc9000356fc28 EFLAGS: 00010a03 [ 67.151480][ T6902] RAX: 0000000000000001 RBX: 0000000000000000 RCX: dffffc0000000000 [ 67.153937][ T6902] RDX: ffff888159077347 RSI: 1ffff1102b20ee68 RDI: ffffffff8ee71594 [ 67.156396][ T6902] RBP: ffff888059077340 R08: 0000000000000005 R09: 0000000000000000 [ 67.158846][ T6902] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 67.161292][ T6902] R13: 0000000000000010 R14: ffff888059077348 R15: ffff88802865ef80 [ 67.163731][ T6902] FS: 0000000000000000(0000) GS:ffff888097ab1000(0063) knlGS:00000000f5056b40 [ 67.166510][ T6902] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 67.168580][ T6902] CR2: ffffed102b20ee68 CR3: 000000004f037000 CR4: 0000000000352ef0 [ 67.171052][ T6902] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.173515][ T6902] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.176113][ T6902] Kernel panic - not syncing: Fatal exception [ 67.178483][ T6902] Kernel Offset: disabled [ 67.179839][ T6902] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:09:59 Registers: info registers vcpu 0 CPU#0 RAX=00000000000d2e03 RBX=0000000000000000 RCX=ffffffff8b717649 RDX=0000000000000000 RSI=ffffffff8dbeb35b RDI=ffffffff8bf4f9c0 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e08 R8 =0000000000000001 R9 =ffffed100564663d R10=ffff88802b2331eb R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90865550 R15=0000000000000000 RIP=ffffffff8b715f0f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0985cc6e9c CR3=000000004b762000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=000000000000001f Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cb0356b91352852a bb459f951cc13ff0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b4b17a7743c2e461 23cc3f9360e7b426 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c56b5424b4530e9 7ccbe32151ea2012 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 697e803b9519aa8e 6f0813b4369b9e35 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000dc0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000000000 c5eada1c0004cc7f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002900000029 0000002900000029 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002900eb7ae2 c5dfa000c59a0124 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c602b9d6c64627f8 0000000000000029 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 855f2c7c01deca34 97d03258439ad5a8 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9e718697264c9e1a 6fce120674cf0539 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6d697377685f31 3132303863616d2f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a756b733a322e 392d3533712d6370 7276633a3174633a 554d45516e76633a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff888022654880 RCX=ffffc90003b5f170 RDX=1ffff110044ca998 RSI=ffffffff81a65cbe RDI=ffff888022654cc4 RBP=ffffc90003b5f120 RSP=ffffc90003b5f050 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90003b5f0d8 R11=000000000000613a R12=ffffffff81a65930 R13=ffffc90003b5f0d8 R14=0000000000000000 R15=ffff888022654880 RIP=ffffffff81a03056 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978b1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f06e40 CR3=000000004d39b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73a2ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffc9000ec30000 RDX=1ffff92001d85ea1 RSI=ffffc9000ec2fdc0 RDI=ffffc9000ec2f508 RBP=ffffc9000ec2ff58 RSP=ffffc9000ec2f458 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000ec2f4c8 R11=0000000000007f88 R12=ffffc9000ec2f518 R13=ffffc9000ec2f4c8 R14=ffffc9000ec2fdf0 R15=ffffc9000ec2f4fc RIP=ffffffff816a3171 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979b1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c269df6 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8552df40 RDI=ffffffff9ae1bc40 RBP=ffffffff9ae1bc00 RSP=ffffc9000356f458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35c37da R15=dffffc0000000000 RIP=ffffffff8552df67 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097ab1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffed102b20ee68 CR3=000000004f037000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001283000000000 000004f400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000